CVE-2017-9769 A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a handle to be opened to an arbitrary process.
CriticalCVSS 9.8
EPSS 85.5%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a handle to be opened to an arbitrary process.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| razer synapse | = 2.20.15.1104 | No fix listed |
References
- www.rapid7.com exploit third-party-advisory
- warroom.securestate.com exploit third-party-advisory
- 42368 exploit third-party-advisory vdb-entry